Personal data

1. Data Controller

Under Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data may be processed by MBA POLİMER SANAYİ VE DIŞ TİCARET ANONİM ŞİRKETİ (“MBA POLİMER”), acting as data controller, within the scope described below.

MBA POLİMER values the confidentiality and security of personal data and takes the necessary administrative and technical measures to process, retain and protect personal data in accordance with the KVKK and relevant legislation.

2. Personal Data That May Be Processed

Depending on the nature of your relationship with MBA POLİMER, the following personal data may be processed:

• Identity information: first name, surname, title,
• Contact information: telephone number, email address, address,
• Company and professional information: employer, job and position details,
• Customer and supplier transaction information,
• Information relating to requests, quotations, orders and contracts,
• Information and messages you send through contact forms or email,
• Transaction security information and technical logs that may be obtained through use of the website.
• 3. Purposes of Personal Data Processing

Your personal data may be collected through:

• Receiving and responding to your enquiries,
• Evaluating requests for products, technical information, samples and quotations,
• Managing customer and supplier relationships,
• Conducting sales, purchasing, import, export and logistics processes,
• Managing quotations, orders and contracts,
• Providing technical support for products and services,
• Conducting finance and accounting operations,
• Conducting and auditing business activities,
• Managing information security processes,
• Fulfilling legal obligations,
• Responding to requests from authorised public institutions and organisations,
• Handling legal disputes and protecting the company's rights.
• These are the purposes for which your data may be processed.

4. Legal Bases for Processing Personal Data

Your personal data may be processed under the processing conditions set out in Article 5 of the KVKK on the following legal bases:

• Processing is expressly provided for by law,
• Processing is directly related to the conclusion or performance of a contract,
• Processing is necessary for the data controller to fulfil a legal obligation,
• Processing is necessary for the establishment, exercise or protection of a right,
• Processing is necessary for MBA POLİMER's legitimate interests, provided it does not harm the data subject's fundamental rights and freedoms.
• These constitute the legal bases for processing.

Where processing cannot be based on any of the above legal grounds and explicit consent is required by legislation, your personal data is processed with your explicit consent.

5. Methods of Collecting Personal Data

Your personal data may be collected through:

• The www.mbapolimer.com website,
• Contact and request forms on the website,
• Email,
• Telephone,
• Business cards,
• Quotations, orders and contracts,
• Customer and supplier discussions,
• Trade fairs, meetings and business discussions,
• Electronic communication systems.
• Data may be obtained through these channels by automated or partly automated means, or by non-automated means where it forms part of a data filing system.

6. Transfer of Personal Data

To the extent required for the processing purposes and in accordance with the relevant provisions of the KVKK, your personal data may be transferred to:

• Authorised public institutions and organisations,
• Legally authorised authorities,
• Professional advisers such as accountants, legal advisers and independent auditors,
• Banks and financial institutions,
• Logistics, transport, customs clearance and warehousing service providers,
• Information technology, hosting, email and similar service providers,
• Suppliers, manufacturers and business partners to the extent required by the business relationship.
• Transfers may be made to these recipients.

Where personal data is transferred abroad, transfers are carried out in accordance with the KVKK provisions on international data transfers and the conditions prescribed by relevant legislation.

7. Retention and Security of Personal Data

MBA POLİMER retains personal data for the period necessary for the processing purpose and the statutory retention periods prescribed by applicable legislation.

When the retention period expires or the reasons requiring processing cease to exist, personal data is deleted, destroyed or anonymised in accordance with applicable legislation.

MBA POLİMER implements appropriate technical and administrative measures to prevent unlawful processing of and access to personal data and to ensure its secure retention.

8. Rights of the Data Subject

Under Article 11 of the KVKK, as a data subject you have the right to:

• Learn whether your personal data is being processed,
• Request information if it has been processed,
• Learn the purpose of processing and whether your data is used in accordance with that purpose,
• Know the third parties to whom your personal data has been transferred in Türkiye or abroad,
• Request correction of incomplete or inaccurate personal data,
• Request deletion or destruction of personal data under the conditions set out in the KVKK,
• Request notification of correction, deletion or destruction to third parties to whom your data has been transferred,
• Object to a result that is to your detriment arising exclusively from automated analysis of processed data,
• Request compensation for damage caused by unlawful processing of your personal data.
• These rights are available to you under the law.

9. Applications

You may submit requests relating to your rights under the KVKK to MBA POLİMER using the methods specified in Law No. 6698 and relevant legislation.

• Data Controller:
• MBA POLİMER SANAYİ VE DIŞ TİCARET ANONİM ŞİRKETİ

Email: [email protected]

Applications are assessed and concluded according to the nature of the request within the periods prescribed by the KVKK and relevant legislation.

10. Updates to This Notice

MBA POLİMER may update this Notice to reflect changes in legislation, company activities or personal data processing procedures.

The current notice is published at www.mbapolimer.com.